DevSecOps Engineer

Job Purpose

To support the bank’s DevSecOps and Secure SDLC programs by integrating security controls into development workflows, enhancing CI/CD automation, and improving code quality and application security across all project teams.

Responsibilities

Secure SDLC & DevSecOps Operations:

• Work closely with Secure SDLC tools and source code management platforms (GitLab, SonarQube, Jenkins).
• Integrate and maintain code scanning, dependency scanning, secrets scanning, and artifact security processes.
• Promote effective usage of GitLab, SonarQube, JFrog, and other DevSecOps solutions among developers and project teams.

Developer & Stakeholder Support:

• Support multiple teams to resolve code issues, vulnerabilities, bugs, and code quality problems.
• Provide clear guidance on secure coding, pipeline usage, and DevSecOps best practices.
• Assist with onboarding new projects into DevSecOps tools and pipelines.

CI/CD Security & Automation:

• Enhance DevSecOps procedures to improve operational efficiency and automation.
• Design secure automated solutions for DEV, UAT, and PROD environments.
• Embed security controls across CI/CD pipelines while maintaining reliability, performance, and high availability.
• Apply Infrastructure-as-Code (IaC) principles to improve automation, scalability, and security.

Technical Expertise & Continuous Improvement:

• Understand microservices and container ecosystems (Docker, Kubernetes, OpenShift, etc.).
• Contribute to improvements of CI/CD templates, scanning policies, and release validation workflows.
• Read and understand DevSecOps and Cybersecurity policies, procedures, and guidelines to ensure compliance.

Additional Duties:

• Participate in internal knowledge sharing, documentation updates, and DevSecOps initiatives.
• Perform other related tasks assigned by the Team Lead or Management.

Qualifications

• Bachelor’s degree in IT, Computer Science, Cybersecurity, or related fields (preferred).
• Minimum 2-3 years of experience in IT Operations, Software Development, Security, or related fields.
• Familiarity with DevOps/DevSecOps tools such as GitLab/GitHub, Jenkins, Ansible, JFrog, SonarQube, Vault, and CI/CD concepts.
• Understanding of containerization and microservice platforms (Docker, Kubernetes, OpenShift).
• Basic experience in programming and scripting (YAML, Bash, Python, etc.).
• Good understanding of code quality, secure coding practices, and vulnerability remediation.
• Effective communication skills in verbal and written English.
• Positive, growth-oriented mindset with willingness to learn and contribute.
• Demonstration of good organization and time-management skills, humble, patient, and collaborative attitude.
• Ability to handle multiple tasks and work under pressure with high accountability.
• Security+, eJPT, or cybersecurity fundamentals (optional but advantageous).